SEDR does not pull any events from SEPM Embedded database
search cancel

SEDR does not pull any events from SEPM Embedded database

book

Article ID: 176431

calendar_today

Updated On:

Products

Endpoint Detection and Response

Issue/Introduction

Using an Embedded database for a non-English installment of SEPM results in SEDR not pulling any events from the Embedded database with the LogCollector.

Cause

In SEDR 4.1 we have an issue with the LogCollector where any non-English characters are printed as a set of question marks (?????).

Resolution

{KNOWN_ISSUE.EN_US}